Applicable for: Enterprise users who using CLO 6.2 or later
First check whether your company's network system is running a proxy server or a service acting as a proxy. If you are not using a proxy, the settings below are not required.
Technical Background
The CLO software and CLO authentication server do not provide proxy server and firewall functions. The proxy server setting provided in the login window of CLO 6.1 version was a convenience function provided that network requests that occur during CLO login go through the proxy server used by your company, and this option is not provided from CLO 6.2 onwards.
Enterprise customers who are building secure network system such as proxy servers and firewalls can find this article helpful. However, except in very special cases, ordinary individual users do not need proxy server settings or firewall settings.
Note that although there are firewalls provided at the OS level, such as Windows or macOS, the firewall described in this article mainly refers to a firewall solution that is part of the secure network that enterprises build.
See also
Corporate Firewall Setup and Whitelisting CLO Endpoints (Link)
Overview
Within the corporate security network, CLO users go through the login process as shown below.
- CLO login requests must pass through a security program such as an antivirus.
- CLO login requests must go through a proxy server to the Internet.
- CLO login requests must pass through the firewall to the Internet.
Note that this is a picture constructed to help users understand.
Actual proxy server configuration and behavior may differ from the picture.
Please contact your company's IT team for more specific details.
Windows User: Add proxy server config into Windows Environment Variables
1) Open Windows system Environment
2) Go to the Advanced, click the Environment Variables button
3) Click New button on the system variables
4) Add your proxy server information as a new system variable
- Variable name "CLO_HTTP(S)_PROXY" must be entered in uppercase.
- If you are using HTTPS protocol, enter the variable name as "CLO_HTTPS_PROXY".
- If you are using HTTP protocol, enter the variable name as "CLO_HTTP_PROXY".
- If you use an ID and password to access the proxy server in your company, enter it according to the rules of "userID:password@proxy server domain:port".
- You must enter the information used by your company, not the CLO account information, and the figure below is only an example.
- If you use an IP and port to access the proxy server in your company, enter them according to the "ip:port" rules. The figure below is an example.
Mac Users: Edit .zprofile file
1) Starting from macOS Catalina, the default shell has changed from bash to zsh. So put your proxy server settings in .zprofile instead of the traditional .bash_profile.
2) If there is no .zprofile file in your Mac Home directory, create a new one.
- This file is hidden by default. Therefore, it is not visible in the Mac folder or Finder.
- Open the macOS Terminal app and follow the steps below.
- pwd: This command displays where you are now.
- ls -a: This command displays all files in the current directory.
- sudo vi ~/.zprofile: This command opens the .zprofile file if it already exists, and creates it if it doesn't exist.
3) Enter and save the proxy server information your company is using in the .zprofile file.
- Open the .zprofile file and enter and save the proxy server information your company is using as shown below.
- export CLO_HTTP_PROXY needs to be additionally called to use the proxy configuration.
CLO_HTTP_PROXY={proxyserver ip}:{port}
export CLO_HTTP_PROXY
- If using the HTTPS protocol, enter CLO_HTTPS_PROXY.
- If using the HTTP protocol, enter CLO_HTTP_PROXY.
- The input method may differ depending on the protocol used (HTTP or HTTPS) and the connection method used (id+password or ip:port). Enter it according to the proxy server approach your company is using.
- The .zprofile file name must be saved as is, and this file does not have an extension.
Comments